cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2314
Views
0
Helpful
3
Replies

AnyConnect SBL Certificate Problems

nxsvc-cisco
Level 1
Level 1

Hi,

a customer use any connect VPN client with certificate authentication.

The Certificates are User Certificates and everything works fine.

The customer now want to use SBL and of course this doesn´t work with normal client certificates.

So the client´s also have a device certificate, but I unable to authenticate with the certificate (I´ve try authenticate via SBL and also after I was logged in and start the connection manualy). But the certificate has the same EKU´s like the User certificate and so on. In the eventviewer I can see an error message, that the system can´t find the login information in the certificate.

 

From this point of view it looks like a problem from the certificate.

 

But, if I copy a working usercertificate into the device certificate folder, it´s possible to authenticate if I start the connetion manualy. Do I try to authenticate with that certificate SBL after a restart, it doesn´t work. After a login and a manual connection start it works again. The Error Message from during the SBL Login meens that he can´t find a certificate to autheticate.

Very Strange.

 

I hope that one of you´ve an idea. I think that it could be a right problem from the any connect client to the certificate store...

 

BR

 

P.s. Or if any one knows a good step by step guide for this topic I will be happy....

3 Replies 3

Hi,

Did you configure the AnyConnect profile to check All certificate stores? Here is an example of SBL configuration.

 

What is the exact error message?

Hi,

 

and thanks for your answer.

I´ve tried both (all and machine only) but there is no difference.

 

If I try to manualy connect the AnyConnect SBL (on the Login screen the button in the right low corner) I´ve get an error message

"unable to connect to this gateway please choose another one" during the connection process I can see the error message
"no valid certificate found". This is the same error message what I can see in the event log.

 

Many thanks...

 

 

Hi,

 

we´ve found the reason.
There was a problem with the admin rights from the AnyConnect Client.

After we´ve renew the run as administrator option for the Any Connect client
and we´ve disabled UAC everything works fine.....

 

BR M